We realized that forum account activation emails were being sent to a nonexistant email server, so no activation emails got sent in the past several months. Accounts now require manual activation by an administrator, and signups are checked pretty regularly.